Publishing plugin should respect compileOnly configuration

compileOnly dependencies are only for compilation. They must never leak into clients, so there would be no point putting them into a published POM (no matter which scope).